PT-2026-30238

Name of the Vulnerable Software and Affected Versions CUPS versions 2.4.16 and prior Description A flaw exists in the CUPS printing system's cupsd daemon due to insufficient input validation when processing the textWithoutLanguage parameter. Successful exploitation allows a remote attacker to...

PT-2026-30239

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions 2.4.16 and prior Description OpenPrinting CUPS is a printing system for Linux and Unix-like operating systems. A local unprivileged user can manipulate cupsd into authenticating to an attacker-controlled localhost IP...

assimp:assimp_fuzzer: Crash in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6341109587705856 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f689b4f0270 Crash State: unsigned i...

poppler:structured_text_fuzzer: Heap-use-after-free in ObjectStream::getObject

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5917696129826816 Project: poppler Fuzzing Engine: afl Fuzz Target:...

harfbuzz:hb-vector-fuzzer: Use-of-uninitialized-value in OT::SVG::accelerator_t::make_doc_cache

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5728341490728960 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-vector-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

dlplibs:hanmacwrdfuzzer: Heap-use-after-free in MsWks4Text::numPages

Detailed Report: https://oss-fuzz.com/testcase?key=4615652903288832 Project: dlplibs Fuzzing Engine: afl Fuzz Target: hanmacwrdfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x769e934e1198 Crash State: MsWks4Text::numPages...

poppler:qt_pdf_fuzzer: Use-of-uninitialized-value in Gfx::doRadialShFill

Detailed Report: https://oss-fuzz.com/testcase?key=5987401314140160 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: qtpdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Gfx::doRadialShFill Gfx::doShadingPatternFil...

ogre:ogre_deep_fuzz: Object-size in Ogre::SkeletonSerializer::readAnimationTrack

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5858244936663040 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: ogredeepfuzz Job Type: libfuzzerubsanogre Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=4801511183155200 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PT-2026-29259

Name of the Vulnerable Software and Affected Versions: OpenClaw versions prior to 2026.3.28 Description: A privilege escalation vulnerability exists in the /pair approve command path due to missing scope validation. A user with pairing privileges, but without admin privileges, can approve pending...

PT-2026-29180

Name of the Vulnerable Software and Affected Versions Everest Forms Pro versions prior to 1.9.13 Description Unauthenticated attackers can achieve remote code execution via PHP code injection in the Everest Forms Pro plugin for WordPress. The issue exists within the Calculation Addon's process...

PT-2026-29181

Name of the Vulnerable Software and Affected Versions Gravity SMTP versions prior to 2.1.5 Description An information exposure flaw exists in the Gravity SMTP plugin for WordPress, affecting approximately 100,000 sites. The issue stems from a REST API endpoint registered at...

PT-2026-29459

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Chromium-based browsers affected versions not specified Description A use-after-free issue exists in Dawn, the WebGPU layer of Chromium. This flaw allows a remote attacker who has already...

PT-2026-29274

Content removed...

CVE-2026-4946

Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when an analyst interacts with the UI. Specifically, the @execute annotation which is intended for trusted, user-authored comments is...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version v12.1.0.2 Vulnerability Details CVEID:CVE-2012-6708 DESCRIPTION: jQuery before 1.9.0 is vulnerable to Cross-site Scripting XSS attacks. The jQuerystrInput function does not differentiate selectors from HTML in a reliable...

GHSA-4F9R-X588-PP2H Fleet's user account creation via invite does not enforce invited email address

Summary Fleet contained an issue in the user invitation flow where the email address provided during invite acceptance was not validated against the email address associated with the invite. An attacker who obtained a valid invite token could create an account under an arbitrary email address whi...

Fleet's user account creation via invite does not enforce invited email address

Summary Fleet contained an issue in the user invitation flow where the email address provided during invite acceptance was not validated against the email address associated with the invite. An attacker who obtained a valid invite token could create an account under an arbitrary email address whi...

GHSA-W254-4HP5-7CVV Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

Summary A Denial of Service vulnerability in Fleet's gRPC Launcher endpoint allows an authenticated host to crash the entire Fleet server process by sending an unexpected log type value. The server terminates immediately, disrupting all connected hosts, MDM enrollments, and API consumers. Impact ...

Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

Summary A Denial of Service vulnerability in Fleet's gRPC Launcher endpoint allows an authenticated host to crash the entire Fleet server process by sending an unexpected log type value. The server terminates immediately, disrupting all connected hosts, MDM enrollments, and API consumers. Impact ...